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IN THE CLAIMS 

Claim 1. (Previously Presented) A method for a Virtual Private Network (VPN) server that 
manages bandwidth of a remote link, comprising: 

assigning by the VPN server a portion of the bandwidth to at least one application group; 

and 

metering by the VPN server packets belonging to the application group; 
wherein the VPN server is configured to at least one of authenticate, encapsulate, and dc- 
cncapsulate at least a portion of the packets. 

Claim 2. Canceled 

Claim 3. (Previously Presented) A method for a Virtual. Private Network (VPN) server that 
manages bandwidth of a remote link, comprising: 

assigning by the VPN server a portion of the bandwidth to at least one application group; 

and 

metering by the VPN server packets belonging to the application group; 

wherein the VPN server is directly connected to other links having larger bandwidth than 
the available bandwidth of the remote link; and wherein the VPN server is configured to at least 
one of authenticate, encapsulate, and de-encapsulate at least aportion of the packets. 

Claim 4. (Original) The method of claim 1 wherein the packets belonging to the application 
group share a pre-defined configuration. 

Claim 5. (Previously Presented) A method for a Virtual Private Network (VPN) server that 
manages bandwidth of a remote link, comprising: 

assigning by the VPN server a portion of the bandwidth to at least one application group; 

and 

metering by the VPN server packets belonging to the application group; 

wherein the packets belonging to the application group contend equally for the portion of 
the bandwidth; and wherein the VPN server is configured to at least one of authenticate, 
encapsulate, and de-encapsulate at least a portion of the packets. 
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Claim 6. (Original) The method of claim 1 wherein metering the packets group further includes 
metering flow rate of the packets going through the server in either direction. 

Claim 7. (Original) The method of claim 6 wherein metering the packets further includes 
rejecting the packets if the flow rate exceeds the portion of the assigned bandwidth. 

Claims. (Previously Presented) A method for a Virtual Private Network (VPN) server that 
manages bandwidth of a remote link, comprising: 

assigning by the VPN server a portion of the bandwidth to at least one application group; 

metering by the VPN server packets belonging to the application group; and 

allowing a user to specify the bandwidth of the remote link from a user interface; 

wherein the VPN server is configured to at least one of authenticate, encapsulate, and de- 
encapsulate at least a portion of the packets. 

Claim 9. (Previously Presented) A method for a Virtual Private Network (VPN) server that 
manages bandwidth of a remote link, comprising: 

assigning by the VPN server a portion of the bandwidth to at least one application group; 

metering by the VPN server packets belonging to the application group; and 

allowing a user to specify the portion of the assigned bandwidth from a user interface; 

wherein the VPN server is configured to at least one of authenticate, encapsulate, and de- 
cncapsulate at least a portion of the packets. 

Claim 10. (Previously Presented) A system for managing bandwidth of a remote link 

comprising: 

a Virtual Private Network (VPN) server, 

a contention pool having a portion of the bandwidth for at least one application group; 

and 

a meter associated with the VPN server for metering the packets belonging to the 
application group; 
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wherein the server is a VPN server is configured to at least one of authenticate, 
encapsulate, and de-encapsulate at least a portion of the packets. 

Claim. 11. Canceled 

Claim 12. (Previously Presented) A system for managing bandwidth of a remote link 
comprising: 

a Virtual Private Network (VPN) server; 

a contention pool having a portion of the bandwidth for at least one application group; 

and 

a meter associated with the VPN server for metering packets belonging to the application 
group by the VPN server; 

wherein the VPN server is directly connected to other links having larger bandwidth than 
the available bandwidth of the remote link; and wherein the VPN server is configured to at least 
one of authenticate, encapsulate, and de-encapsulate at least a portion of the packets. 

Claim 13, (Original) The system of claim 10 wherein the packets belonging to the application 
group share a pre-defined configuration, 

Claim 14. (Previously Presented) A system for managing bandwidth of a remote link 
comprising: 

a Virtual Private Network (VPN) server; 

a contention pool having a portion of the bandwidth for at least one application group; 

and 

a meter associated with the VPN server for metering packets belonging to the application 
group by the VPN server; 

wherein the packets belonging to the application group contend equally for the contention 
pool; and wherein the VPN server is configured to at least one of authenticate, encapsulate, and 
de-encapsulate at least a portion of the packets. 
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Claim 15. (Original) The system of claim 10 wherein the meter further meters flow rate of the 
packets going through the server in either direction. 

Claim 16. (Original) The system of claim 15 wherein the meter further rejects the packets if the 
flow rate exceeds the assigned portion of the bandwidth. 

Claim 17. (Previously Presented) A system for managing bandwidth of a remote link 
comprising: 

a Virtual Private Network (VPN) server; 

a contention pool having a portion of the bandwidth for at least one application group; 

and 

a meter associated with the VPN server for metering packets belonging to the application 
group by the VPN server; and 

a user interface that allows a user to specify the bandwidth of the link; 

wherein the VPN server is configured to at least one of authenticate, encapsulate, and de- 
encapsulate at least a portion of the packets. 

Claim 18. (Previously Presented) A system for managing bandwidth of a remote link 

comprising: 

a Virtual Private Network (VPN) server; 

a contention pool having a portion of the bandwidth for at least one application group; 

and 

a meter associated with the VPN server for metering packets belonging to the application 

group by the VPN server; and 

a user interface that allows a user to specify the assigned portion of the bandwidth; 

wherein the VPN server is configured to at least one of authenticate, encapsulate, and de- 
encapsulate at least a portion of the packets. 
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